« first day (3689 days earlier)      last day (1191 days later) » 

1:58 AM
@MechMK1 That's an awfully small public key. Does it not include subkeys or something?
@MechMK1 I don't think it's against the rules to post PGP messages in a private room.
@reed Always thought it would be fun to try to reverse that. I bet they have horrible opsec and use outdated remote screen tools. "Here hack me and take my money" [reverse shell open]
 
 
4 hours later…
5:55 AM
Pentesting can often give conflicting feelings. Looking at a vuln, half of me is like "hell yeah! let's exploit this!" while the other half is like "WTF are you doing? Why is it like this? Someone should be fired"
 
@JohnZhau If only you didn't have that damn PtA, you could exploit it for fun and profit!
 
 
2 hours later…
7:48 AM
0
A: badBIOS reflashing

Gernot Ueblacker Its real. I know the developer. Been fighting it 14 years.Its a fraudulent windows-based OS that places the user in an Always-On VPN named NONE and an OS version named NULL and lives in Folder named Unknown while using an OTHER network interface. It gives 4 remote users (Kansas) unfettered acces...

Is this guy using Windows XP?
 
8:36 AM
I really can't understand why people using outdated OSes end up with malware
 
9:19 AM
@forest It's an ed25519 key, and those just are a lot smaller than RSA
@JohnZhau Yup, but the converse is also true
"Yeah, we didn't find anything in 2 weeks"
"That's great, right?!"
"Yeah, I...I guess so... :/"
@forest I asked in the tavern around 2019, and some mod said it was against the rules, since mods can't see what you are doing
You could, in theory, use SE chat for all kinds of illegal activity then
 
it's kinda like trying to balance "the fun of embarrassing the sysadmins" and "feeling proud of the sysadmins you trained"
 
9:43 AM
@JohnZhau I'm the chaotic good guy, who just likes to mess with shit. The fact that net security improves is just a bonus
 
9:56 AM
I noticed a weird thing in Twitter security.
If you log into your account, there is a notification in your mentions that someone has logged into your account. This notification stays in your feed and can't be dismissed.
However, if you have 2FA security enabled for your account, then this notification is not shown.
You would think that someone who enables 2FA would desire a higher standard of security.
Why you would disable a security feature for someone with a higher need for security is beyond me.
 
 
1 hour later…
11:19 AM
I set up MFA as soon as I make m accounts so I never noticed...
 
 
4 hours later…
3:14 PM
How is this a security question?
0
Q: Can I change my router without my ISP's permission and will it work?

Howard DominauxI would like to know if I can change my router without my ISP's permission and will it work?

 
3:30 PM
@FireQuacker Alot of people seem to have the misconception that everything related to networking falls within the domain of cyber security. I have no idea where this comes from.
 

« first day (3689 days earlier)      last day (1191 days later) »